Comments on: Ubiquiti Unifi Controller SSL Certificate creation process

By: Andrew Kay

Andrew Kay — Tue, 31 Jan 2023 06:09:17 +0000

Wanted to say I just tried this process on controller ver 7.3.76 running on Ubuntu and the directions worked perfectly the first time.

By: Jeroen Tielen

Jeroen Tielen — Thu, 27 Oct 2022 08:25:04 +0000

In reply to Joey. The blog is a bit old and not up to date for the new unifi controllers.

By: Joey

Joey — Thu, 20 Oct 2022 21:46:47 +0000

Instructions were very straight-forward, but when I replace the original keystore with the modified one (containing my key/cert/int) on startup, that keystore file is overwritten with the self-signed certificate. Any thoughts?

By: George Carey

George Carey — Tue, 23 Mar 2021 03:42:44 +0000

Thanks for the tips Jeroen! I took this one step further and created a script to do this all on the command line. That way I can update the certs automatically. I already have Let’s Encrypt doing all the renewals elsewhere.

https://github.com/gcarey3/copy_certs_to_udmpro

By: Jeroen Tielen

Jeroen Tielen — Thu, 12 Nov 2020 15:19:20 +0000

In reply to Martin.

Hi Martin,

I dont have the Cloud Key Gen2+ anymore. I switched over to an Unifi Dream Machine Pro. But this could be because you have the wrong type of key-pair. This should be a RSA key. Try to convert the key to RSA and try again.

Best regards, Jeroen.

By: Martin

Martin — Tue, 10 Nov 2020 21:28:49 +0000

In reply to Jeroen Tielen.

Hi Jeroen

Did you get it to work on your Cloud Key Gen2 + ?
I have install the SSL certificate and rebooted the key and USG Pro but I still only see the std. certificate called CloudKey. How do I change the std. certificate to the new one ?

Best Regards
Martin

By: Jeroen Tielen

Jeroen Tielen — Wed, 01 Apr 2020 14:49:09 +0000

In reply to Mark.

Hi Mark,

Yes to re-key (create a new key-pair) to need to create a new csr. You can do this via multiple methods. I dont know is the ssl tools are present in a ubiquiti controller at the moment. Cant test it either as I switched over to Cloud Ket Gen2+.

Best regards Jeroen.

By: Mark

Mark — Wed, 01 Apr 2020 11:52:44 +0000

Our CCTV server died and has been rebuilt but has a different name. I’ve been told by our web host that we need to re-key the certificate. I’ve downloaded and installed keystore explorer but there are no keyfiles in the location mentioned for Windows servers.
To re-key the current cert I need to generate a CSR – is there a way to do this in Ubiquiti?
Thanks in advance

By: Jeroen Tielen

Jeroen Tielen — Tue, 11 Feb 2020 16:51:14 +0000

In reply to Johan. You’re welcome.

By: Johan

Johan — Tue, 11 Feb 2020 16:10:23 +0000

Thanks, this helped a lot.

By: Jeroen Tielen

Jeroen Tielen — Mon, 13 Jan 2020 12:43:06 +0000

In reply to Krzysztof. No. Internet is, by default, not safe. Certificates installed on the network will only say that those devices are who they say they are. Requested websites must have certificates installed (TLS certs). Best regards, Jeroen.

By: Krzysztof

Krzysztof — Mon, 13 Jan 2020 12:40:34 +0000

Hello Jeroen,
Maybe a trivial question, but please write if it’s possible.
All devices on the network should have SSl certificates installed to browse the internet safely.
Is it possible to install the certificate on a Unifi controller not to install on computers?
I have UniFi Security Gateway pro-4 and two 24 port switches.
Regards
Christopher